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Background of the Invention 
Field of the Invention 

The present invention relates to an apparatus and 
method for authenticating a user according to 
biometric information such as a fingerprint, voice, 
and so on. 

Description of the Related Art 

Recently, the infrastructure of communications 
lines have been desirably organized. Information 
processing devices such as computers, and so on, are 
interconnected through communications lines, and users 
can remotely utilize various services. In money or 
privacy involved services, it is indispensable to 
confirm the identity of a use through a password, and 
so on. 

On the other hand, unfortunately, there has been 
an advantageous environment developed for criminals 
who try to prepare a program to automatically find a 
password using their own computers. Therefore, a user 
is requested to use a long password. But, it is 
necessarily difficult to manage or memorize a long 
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password. Under the situation, a matching check 
carried out using biometric information such as a 
fingerprint, the iris of an eye, a voiceprint, the 
distribution of the blood vessels in a retina, a 
5 signature, a face, the pattern of a vein, and so on, 
is expected as a method for replacing a password 
system because biometric information can be more 
easily maintained or memorized, and can realize 
correct user authentication. 

10 However, the conventional user authentication 

technology using biometric information has the 
following problems . 

The reproducibility of biometric information 
mostly depends on each person, and some users may 

15 indicate very low reproducibility of biometric 
information. It is difficult for those users to use 
the system as is. On the other hand, the system 
itself is not appropriately developed to use the user 
authentication technology on an inappropriate user 

20 (who cannot use the technology) using biometric 
information . 

Furthermore, according to the user authentication 
technology using biometric information, there is the 
problem that the acceptability of a user and the 
25 acceptability of others are traded off, and the 



acceptability of others should be enhanced to maintain 
constant acceptability of a user. Therefore, when 
specific biometric information is adopted, it is 
necessary to provide a systematic countermeasure for 
a user who finds difficulty in using the biometric 
information . 

Particularly, in the user authentication in a 
network, a common network protocol and sequences 
cannot be properly maintained unless an exception 
process can be appropriately performed on a difficult 
user. 

Furthermore, since only one type of 
authentication data is transmitted in a conventional 
password system, there arises the problem that a 
difficult switching operation is required for the 
biometric information . 

Summary o f the I n ven t i on 

The present invention has been developed to solve 
the above described problems, and aims at providing 
an authentication apparatus and method appropriate for 
most of users including those having poor 
reproducibility in biometric information in the user 
authentication technology based on biometric 
information . 
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According to the first aspect of the present 
invention, the authentication apparatus includes: a 
biometric information input unit for inputting 
biometric information; an extraction unit for 
5 extracting biometric feature information from the 
input biometric information; an estimation unit for 
estimating the matching precision of the extracted 
t ;j biometric feature information; a request unit for 

*Z requesting an input of additional authentication 

10 information when it is estimated that predetermined 
matching precision cannot be obtained; an 
authentication information input unit for inputting 
the authentication information; a biometric feature 
information registration unit preliminarily storing 
15 registered biometric feature information; an 
authentication information registration unit 
preliminarily storing additional registered 
authentication information; a biometric feature 
information matching check unit for having a matching 
20 check between the extracted biometric feature 
information and the registered biometric feature 
information; an authentication information matching 
check unit for having a matching check between the 
input authentication information and the above 
25 described registered authentication information; and 
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a determination unit for computing the matching 
precision by combining the matching check result about 
the biometric feature information with the matching 
check result about the additional authentication 
5 information, and determining based on the computation 
result whether or not the user is authenticated. 

According to the second aspect of the present 

IS? 

invention, the authentication apparatus includes: a 
•I biometric information input unit for inputting 

|jf 10 biometric information; an extraction unit for 

hi extracting biometric feature information from the 

• * ** 

input biometric information; an estimation unit for 
: ; ; estimating the matching precision of the extracted 

NJ biometric feature information; a request unit for 

£j 15 requesting an input of other biometric information 

when it is estimated that predetermined matching 
precision cannot be obtained; a biometric feature 
information registration unit preliminarily storing 
plural pieces of registered biometric feature 
20 information; a biometric feature information matching 
check unit for having a matching check between the 
extracted biometric feature information and the 
registered biometric feature information; and a 
determination unit for computing the matching 
25 precision by combining the matching check results 



about the plural pieces of biometric feature 
information extracted from the plural pieces of input 
biometric information, and determining based on the 
computation result whether or not the user is 
authenticated . 

According to the third aspect of the present 
invention, the authentication apparatus includes: a 
biometric information input unit for inputting 
biometric information; an extraction unit for 
extracting biometric feature information from the 
input biometric information; an authentication 
information input unit for inputting additional 
authentication information; a biometric feature 
information registration unit preliminarily storing 
registered biometric feature information; an 
authentication information registration unit 
preliminarily storing additional registered 
authentication information; a biometric feature 
information matching check unit for having a matching 
check between the extracted biometric feature 
information and the registered biometric feature 
information; an authentication information matching 
check unit for having a matching check between the 
input authentication information and the above 
described registered authentication information when 



the predetermined matching precision cannot be 
obtained from the matching check result about the 
biometric feature information; and a determination 
unit for computing the matching precision by combining 
the matching check result about the biometric feature 
information with the matching check result about the 
additional authentication information, and determining 
based on the computation result whether or not the 
user is authenticated. 

According to the fourth aspect of the present 
invention, a client device in a client-server type 
authentication system includes: a biometric 
information input unit for inputting biometric 
information; an extraction unit for extracting 
biometric feature information from the input biometric 
information; an estimation unit for estimating the 
matching precision of the extracted biometric feature 
information; a request unit for requesting an input 
of additional authentication information when it is 
estimated that predetermined matching precision cannot 
be obtained; an authentication information input unit 
for inputting the authentication information; a 
generation unit for generating matching check data by 
combining the extracted biometric feature information 
with the input authentication information; and a 
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communications unit for transmitting the matching 
check data to the server to have a matching check 
between the generated matching check data and 
registered information . 
5 According to the fifth aspect of the present 

invention, a server device in a client-server type 
authentication system includes: a communications unit 

i!3 

for receiving biometric feature information and 
additional authentication information from a client; 

I ■ H 

]Ji 10 a biometric feature information registration unit 

h'J preliminarily storing registered biometric feature 

** * 

i5 information; an authentication information 

* *» 

registration unit preliminarily storing additional 
;4 registered authentication information; a biometric 

rj 15 feature information matching check unit for having a 

matching check between the received biometric feature 
information and the registered biometric feature 
information; an authentication information matching 
check unit for having a matching check between the 
20 received authentication information and the above 
described registered authentication information; and 
a determination unit for computing the matching 
precision by combining the matching check result about 
the biometric feature information with the matching 
25 check result about the additional authentication 
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information, and determining based on the computation 
result whether or not the user is authenticated. 

According to the sixth aspect of the present 
invention, an authentication apparatus comprises: a 
5 biometric information input unit for inputting 
biometric information; an extraction unit for 
extracting biometric feature information from the 

i s ''i 

isiJ input biometric information; an estimation unit for 

estimating the matching precision of the extracted 

| s !; 10 biometric feature information; a request unit for 

requesting an input of additional authentication 

f i! 
** ■ - 

, E information when it is estimated that predetermined 

£T matching precision cannot be obtained; an 

| '* authentication information input unit for inputting 

£3 15 the authentication information; a biometric feature 

information registration unit storing the biometric 
feature information as registered biometric feature 
information; an authentication information 
registration unit storing the authentication 
20 information as additional registered authentication 
information; a biometric feature information matching 
check unit for having a matching check between the 
biometric feature information extracted from the 
biometric information input for authentication and the 
25 registered biometric feature information; an 
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authentication information matching check unit for 
having a matching check between the authentication 
information input for authentication and the above 
described registered authentication information; and 
a determination unit for computing the matching 
precision by combining the matching check result about 
the biometric feature information with the matching 
check result about the additional authentication 
information, and determining based on the computation 
result whether or not the user is authenticated. 

According to the seventh aspect of the present 
invention, a client device in a client -server type 
authentication system includes: a biometric 
information input unit for inputting biometric 
information; an extraction unit for extracting 
biometric feature information from the input biometric 
information; an estimation unit for estimating the 
matching precision of the extracted biometric feature 
information; a request unit for requesting an input 
of additional authentication information when it is 
estimated that predetermined matching precision cannot 
be obtained; an authentication information input unit 
for inputting the authentication information; a 
generation unit for generating registration data by 
combining the extracted biometric feature information 
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with the input authentication information; and a 
communications unit for transmitting the registration 
data to the server to register the generated 
registration data. 
5 According to the eighth aspect of the present 

invention, a server device in a client -server type 
authentication system includes: a communications unit 

'•s : sf 

for receiving biometric feature information and 

is ;~ 

, ^ additional authentication information from a client; 

; s ;f 10 a biometric feature information registration unit 

! -::J storing the received biometric feature information as 

Pi 

!8 registered biometric feature information; an 

authentication information registration unit storing 
| ^ the received authentication information as additional 

□ 15 registered authentication information; a biometric 

feature information matching check unit for having a 
matching check between the biometric feature 
information received from a client for authentication 
and the registered biometric feature information; an 
20 authentication information matching check unit for 
having a matching check between the authentication 
information received from a client for authentication 
and the above described registered authentication 
information; and a determination unit for computing 
25 the matching precision by combining the matching check 
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result about the biometric feature information with 
the matching check result about the additional 
authentication information, and determining based on 
the computation result whether or not the user is 
authenticated . 

Brief Description of the Drawings 

FIG. 1 shows the principle of the authentication 
apparatus according to the present invention; 

FIG. 2 shows the configuration of the first 
authentication apparatus ; 

FIG. 3 shows a set value of a biometric feature 
information matching score; 

FIG. 4 shows a set value of an auxiliary 
information matching score; 

FIG. 5 is a flowchart of the first authenticating 
process; 

FIG. 6 shows the configuration of the second 
authentication apparatus ; 

FIG. 7 is a flowchart of the second 
authenticating process ; 

FIG. 8 shows the configuration of the third 
authentication apparatus ; 

FIG. 9 is a flowchart of the third authenticating 
process; 
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FIG. 10 shows the configuration of the fourth 
authentication apparatus ; 

FIG. 11 is a flowchart of the fourth 
authenticating process ; 
5 FIG. 12 shows the first matching check data; 

FIG. 13 is a flowchart of a matching check data 
generating process ; 

FIG. 14 shows the configuration of the first 
cl ient - server system ; 
10 FIG. 15 is a flowchart of the first client 

process; 

FIG. 16 is the first server process; 
FIG. 17 is a flowchart of the second server 
process; 

15 FIG. 18 shows the fifth authentication apparatus; 

FIG. 19 is a flowchart of the first registering 
process 

FIG. 20 is a flowchart of the fifth 
authenticating process ; 
20 FIG. 21 shows the configuration of the sixth 

authentication apparatus; 

FIG. 22 shows the configuration of the seventh 
authentication apparatus ; 

FIG. 23 is a flowchart of the second registering 
25 process; 



I- '1! 



14 

FIG. 24 is a flowchart of the sixth 
authenticating process ; 

FIG. 25 shows the configuration of the second 
client-server system; 
5 FIG. 26 is a flowchart of the third registering 

process; 

FIG. 27 is a flowchart of the second client 
process ; 

FIG. 28 is a flowchart of the third server 
10 process; 

FIG. 29 shows the combination of matching check 

data; 

FIG. 30 shows an ID number; 

FIG. 31 shows the second matching check data; 
15 FIG. 32 shows the third matching check data; 

FIG. 33 shows the configuration of the eighth 
authentication apparatus ; 

FIG. 34 is a flowchart of the seventh 
authenticating process; 
20 FIG. 35 shows the configuration of the 

information processing device; and 

FIG. 36 shows a storage medium. 
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Description of the Preferred Embodiments 

The preferred embodiments of the present 
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invention are described below by referring to the 
attached drawings . 

FIG. 1 shows the principle of the authentication 
apparatus of the present invention. 

According to the first principle of the present 
invention, the authentication apparatus comprises a 
biometric information input unit 1, an extraction unit 
2, an estimation unit 3, a request unit 4, an 
authentication information input unit 5, a biometric 
feature information registration unit 6, an 
authentication information registration unit 7, a 
biometric feature information matching check unit 8, 
an authentication information matching check unit 9, 
and a determination unit 10. 

The biometric information input unit 1 inputs 
biometric information. The extraction unit 2 extracts 
biometric feature information from the input biometric 
information. The estimation unit 3 estimates the 
matching precision of the extracted biometric feature 
information. The request unit 4 requests an input of 
additional authentication information. The 
authentication information input unit 5 inputs 
authentication information. The biometric feature 
information registration unit 6 preliminarily stores 
registered biometric feature information. The 
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authentication information registration unit 7 
preliminarily stores additional registered 
authentication information. The biometric feature 
information matching check unit 8 has a matching check 
5 between the extracted biometric feature information 
and the registered biometric feature information. The 
authentication information matching check unit 9 has 
a matching check between the input authentication 

S3 

. ~ information and the registered authentication 

j J: s 10 information. The determination unit 10 computes the 

'•i ' - 

W matching precision by combining the matching check 

* * #• 
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result about the biometric feature information with 

: s 

i|™ the matching check result about the additional 

|^ authentication information, and determines based on 

' ''Hi 

q 15 the computation result whether or not the user is 

* * ** 

authenticated . 

The extraction unit 2 extracts the biometric 
feature information indicating the feature of the 
biometric information about the user. The estimation 

20 unit 3 estimates the matching precision from the 
quality of the biometric feature information. When 
the estimated matching precision is lower than the 
predetermined matching precision, the request unit 4 
prompts a user to input additional authentication 

25 information such as a password. In addition, if the 
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estimated matching precision reaches the predetermined 
matching precision, then the request unit 4 does not 
request additional authentication information. 

When the authentication information is input, the 
5 biometric feature information matching check unit 8 
has a matching check on the biometric feature 
information, and the authentication information 
matching check unit 9 has a matching check on the 
authentication information. Then, the determination 

10 unit 10 combines the matching check results and 
computes the matching precision. If the predetermined 
matching precision can be obtained, the determination 
unit 10 determines that the user is authenticated, and 
outputs a determination result. 

15 With the above described authentication 

apparatus, the matching precision of biometric feature 
information can be estimated before performing a 
matching check. Therefore, even a user having poor 
reproducibility about the biometric feature 

20 information can be correctly authenticated by 
inputting additional authentication information. In 
addition, a user having good reproducibility about 
biometric feature information is not required to input 
additional authentication information . 

25 Furthermore, according to the second principle 
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of the present invention, the authentication apparatus 
comprises the biometric information input unit 1, the 
extraction unit 2, the estimation unit 3, the request 
unit 4, the biometric feature information registration 
5 unit 6, the biometric feature information matching 
check unit 8, and the determination unit 10. 

The biometric information input unit 1 inputs 
biometric information. The extraction unit 2 extracts 
biometric feature information from the input biometric 

10 information. The estimation unit 3 estimates the 
matching precision of the extracted biometric feature 
information. The request unit 4 requests an input of 
other authentication information when it is estimated 
that predetermined matching precision cannot be 

15 obtained . 

The biometric feature information registration 
unit 6 preliminarily stores plural pieces of 
registered biometric feature information. A biometric 
feature information matching check unit 8 has a 

20 matching check between the extracted biometric feature 
information and the registered biometric feature 
information. A determination unit 10 computes the 
matching precision by combining the matching check 
results of the plural pieces of biometric feature 

25 information extracted from the plural pieces of input 
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biometric information, and determines based on the 
computation result whether or not the user is 
authenticated . 

When the estimated matching precision is lower 
5 than the predetermined matching precision, the request 
unit 4 prompts the user to input other biometric 
information having a similar type or a different type 
■v3 as compared with the previously input biometric 

j.;3 information. For example, if the previously input 

;=jf 10 biometric information is fingerprint information, then 

u :~ the request unit 4 requests the fingerprint 

ii information about another finger, or another type of 

i,I biometric information such as a fingerprint, the iris 

of an eye, a voiceprint, the distribution of the blood 
il 15 vessels in a retina, a signature, a face, the pattern 

of a vein, and so on. Furthermore, if the estimated 
matching precision reaches the predetermined matching 
precision, then it requests no other biometric 
information . 

20 When the biometric information input unit 1 

inputs other biometric information, the extraction 
unit 2 extracts the biometric feature information from 
the biometric information, and the biometric feature 
information matching check unit 8 has a matching check 

25 on plural pieces of biometric feature information. 
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Then, the determination unit 10 combines the matching 
check results and computes the matching precision. 
If the determination unit 10 obtains predetermined 
matching precision, it authenticates the user, and 
5 outputs a determination result. 

With the above described authentication 
apparatus, the matching precision of biometric feature 
information can be estimated before performing a 
matching check. Therefore, even a user having poor 

10 reproducibility about the biometric feature 
information can be correctly authenticated by 
inputting additional authentication information. In 
addition, a user having good reproducibility about 
biometric feature information is not required to input 

15 additional authentication information. 

As described above, one of the important points 
of the present invention is to estimate the matching 
precision of biometric feature information before 
performing a matching check on the biometric feature 

20 information, and to request to input additional 
authentication information such as a password, other 
biometric information, and so on, based on an 
estimation result. Another important point of the 
present invention is to output a determination by 

25 combining a matching check result about biometric 
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feature information with a matching check result about 
additional authentication information . 

For example, the biometric information input unit 
1, the extraction unit 2, the estimation unit 3, the 
authentication information input unit 5, the biometric 
feature information registration unit 6, the 
authentication information registration unit 7, the 
biometric feature information matching check unit 8, 
the authentication information matching check unit 9, 
and the determination unit 10 shown in FIG. 1 
respectively correspond to a biometric information 
input unit, a biometric feature information extraction 
unit, a matching precision estimation unit, an 
auxiliary information input unit, a biometric feature 
information registration and storage unit, an 
auxiliary information registration and storage unit, 
a biometric feature information matching check unit, 
an auxiliary information matching check unit, and a 
matching check result determination unit described 
later. The request unit 4 shown in FIG. 1 corresponds 
to, for example, an auxiliary information setting unit 
or a biometric information setting unit described 
later. 

The embodiments of the present invention are 
described below by referring to the attached drawings. 
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According to the present invention, the following 
interface is provided for a user who cannot be easily 
authenticated by biometric information, 

( 1 ) When authentication information is 

5 registered, additional authentication data is 
registered in addition to the biometric feature 
information representing the feature of biometric 
< a: I information . 

k ;j ( 2 ) When authentication information is 

10 registered, the matching precision (user acceptability 
rate, other person acceptability rate, and so on. ) 

• s : s 

tl of registered data is determined, and the registration 

i"T of additional authentication data is prompted. 

\ l * (3) When authentication information is matching - 

□ 15 checked, the matching precision (user acceptability 

rate, other person acceptability rate, and so on, ) 
of registered data is determined, and the input of 
additional authentication data is prompted, 

( 4 ) A single procedure of communications can be 
20 used by processing biometric feature information and 
additional authentication data as a set of matching 
check data . 

As biometric information, any information based 
on the biometric characteristic of a user such as a 
25 fingerprint, the iris of an eye, a voiceprint, the 
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distribution of the blood vessels in a retina, a 
signature, a face, the pattern of a vein, and so on. 
The type of biometric information depends on an 
applicable matching check method . However, for 
5 example, relating to a fingerprint, a fingerprint 
image, key biometric information extracted from a 
s: „ fingerprint image, and so on, can be input as 

! *3 biometric information. In addition, as additional 

=.;} authentication data, auxiliary information such as a 

rij 

10 password, and so on, , other biometric feature 

f j;* information, and so on, can be used. 

is By providing the above described interface, even 

i *• 

a user having poor reproducibility about biometric 
jj'j feature information can use an authentication system 

O 15 by inputting additional authentication data. In 

r-'-T. 

addition, wince biometric feature information and 
additional authentication data are processed as a set 
of matching check data, a communications procedure 
similar to that of a matching check using a password 

20 can be used in a client-server type matching check 
system. Various embodiments of the authentication 
apparatus/system according to the present invention 
are sequentially described below. 

The first authentication apparatus registers 

25 biometric feature information and auxiliary 
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information other "than the biometric feature 
information in a registering process, and requests a 
user to input his or her biometric information in a 
matching check process. If it is determined that 
predetermined matching precision cannot be obtained 
from the quality of the biometric feature information 
extracted from the biometric information, then the 
authentication apparatus requests the user to input 
auxiliary information . 

Confidential information, user information, 
password, and so on, known to nobody but the user can 
be used as auxiliary information. In addition, a user 
stores the auxiliary information in any media such as 
a magnetic card, an IC (integrated circuit) card, a 
non-contact card, and so on. The auxiliary 

information can be input through the media. By using 
the media, a user is not required to store auxiliary 
information. In addition, the number of pieces of 
auxiliary information for use in a matching check 
process is not limited to one. That is, plural pieces 
of auxiliary information can be used in combination. 

When biometric information has changed or 
biometric feature information has poor 
reproducibility, for example, when a voice matching 
check process is performed on a user who has caught 
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cold, or in a fingerprint matching check process 
performed on a user having coarse fingers, and so on, 
a matching check result can be obtained in 
predetermined matching precision by requesting the 
5 user to input auxiliary information. Therefore, the 
biometric information is not inapplicable, and the 
user can be easily authenticated. 

Q 

□ In addition, the number of requests to input 

auxiliary information can be a minimum by estimating 
10 the matching precision of the biometric feature 
! j:f information when a matching check process is 

; 3 performed. Therefore, a user having good 

lI reproducibility about biometric feature information 

; : - r can omit to input auxiliary information. 

£3 15 FIG. 2 shows the configuration of the above 

described authentication apparatus . The 
authentication apparatus shown in FIG. 2 comprises a 
biometric information input unit 11, a biometric 
feature information extraction unit 12, a matching 
20 precision estimation unit 13, a auxiliary information 
setting unit 14, an auxiliary information input unit 
15, a matching check unit 16, a matching check result 
determination unit 17, a storage unit 18, and a 
control unit 19. The matching check unit 16 comprises 
25 a biometric feature information matching check unit 
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20 and an auxiliary information matching check unit 
21. The storage unit 18 comprises a biometric feature 
information registration and storage unit 22 and an 
auxiliary information registration and storage unit 
23. 

The control unit 19 controls the operations of 
the entire apparatus. The biometric information input 
unit 11 inputs biometric information. The biometric 
feature information extraction unit 12 extracts 
biometric feature information from the input biometric 
information. The matching precision estimation unit 
13 estimates the matching precision from the quality 
of the biometric feature information extracted from 
the biometric information input in a matching check 
process. If it is determined that predetermined 
matching precision cannot be obtained, then the 
auxiliary information setting unit 14 is notified that 
auxiliary information is required for authentication. 
In response to the notification, the auxiliary 
information setting unit 14 prompts the user to input 
auxiliary information, and the auxiliary information 
input unit 15 inputs the auxiliary information. 

For example, when a fingerprint image is input 
as biometric information, information such as the 
intensity of a fingerprint image, the contrast, the 
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number of feature points including error feature 
points, the number of cracks in a fingerprint ridge 
line, the contour line length of a fingerprint ridge 
line, a frequency element, a disorder of a detected 
5 ridge line direction information, an area of an input 
image, and so on, by extracting biometric feature 

a: . information. Then, according to the information, the 

matching precision can be determined. 

i u \j The biometric feature information registration 

10 and storage unit 22 registers and stores biometric 

: 3 : s 

feature information preliminarily extracted from 
biometric information. The auxiliary information 

'a:J 

registration and storage unit 23 preliminarily 
registers and stores auxiliary information. The 
O 15 biometric feature information matching check unit 20 

has a matching check between input biometric feature 
information and preliminarily registered biometric 
feature information. The auxiliary information 

matching check unit 21 has a matching check between 

20 input auxiliary information and preliminarily 
registered auxiliary information. 

The matching check result determination unit 17 
combines using a predetermined function the matching 
precision computed from the matching check result 

25 (score) about biometric feature information with the 
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matching precision computed from the matching check 
result about auxiliary information. When the matching 
precision is equal to or higher than the predetermined 
matching precision, then the user is authenticated. 
5 Assume that an other persons exclusion rate (non- 

matching rate) is used, and a product of two other 
persons acceptability rates is used as a predetermined 
function. Also assume that the relationship between 
the matching score of biometric feature information 

10 and an other persons acceptability rate is set as 
shown in FIG. 3, the relationship between the matching 
score of auxiliary information and the an other 
persons acceptability rate is set as shown in FIG. 4, 
and the reference value of the other person 

15 acceptability rate required to authenticate a user is 
set to 1/100000. 

If the score obtained in a matching check of 
biometric feature information is 4, and the score 
obtained in a matching check of auxiliary information 

20 is 14, then the other person acceptability rates are 
respectively 1/1000 and 1/100 according to FIGS. 3 and 
4. At this time, the products of these other person 
acceptability rates is 1/1000 x 1/100 = 1/100000, 
thereby matching the set reference value. As a 

25 result, the user can be authenticated. 
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If "the score obtained in a matching check process 
about biometric feature information is 4, and the 
score obtained in a matching check process about 
auxiliary information is 15, then the other person 
acceptability rates are respectively 1/1000 and 1/10 
according to FIGS. 3 and 4. At this time, the 
products of these other person acceptability rates is 
1/1000 x 1/10 - 1/10000, thereby exceeding the set 
reference value of 1/00000. As a result, there is a 
strong possibility that the user is not a registered 
person. As a result, the user cannot be 

authenticated . 

Although an other persons acceptability rate is 
used as matching precision in the above described 
example, any other index such as a user acceptability 
rate, other persons exclusion rate, and so on, can 
also be used. In addition, a more complicated 
equation can be used as a predetermined function, and 
a table indicating the relationship between a matching 
score and matching precision can be set in higher 
precision. 

FIG. 5 is a flowchart of the authenticating 
process performed by the authentication apparatus 
shown in FIG. 2. First, the biometric information 
input unit 11 inputs user's biometric information 
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( step SI ) . The biometric feature information 

extraction unit 12 extracts biometric feature 
information from the biometric information (step S2 ) . 
Then, the matching precision estimation unit 13 
5 estimates matching precision from the quality of the 
biometric feature information ( step S3 ) , and compares 
the estimated matching precision with predetermined 
;5 matching precision (step S4 ) . 

j If the estimated matching precision is equal to 

;i 10 or higher than the predetermined matching precision, 

f then the biometric feature information matching check 

unit 20 has a matching check between the extracted 
I biometric feature information and the biometric 

=; feature information registered in the biometric 

J 15 feature information registration and storage unit 22 

(step S5 ) , and compares the matching check result with 
a predetermined matching threshold (step S6 ) . Then, 
if the matching check result is equal to or larger 
than the threshold, the user is authenticated (step 
20 S7 ) . If the matching check result is smaller than the 
threshold, then the user is not authenticated (step 
S8 ) , thereby terminating the process. 

If the estimated matching precision is lower than 
the predetermined matching precision in step S4, then 
25 the auxiliary information setting unit 14 prompts the 
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user to input: auxiliary information (step S9 ) . The 
auxiliary information input unit 15 inputs auxiliary 
information ( step S10 ) . 

Then, the biometric feature information matching 
5 check unit 20 has a matching check between the 
extracted biometric feature information and the 
biometric feature information registered in the 
biometric feature information registration and storage 
unit 22 (step Sll). The auxiliary information 

10 matching check unit 21 has a matching check between 
the input auxiliary information and the auxiliary 
information registered in the auxiliary information 
registration and storage unit 23 (step S12 ) . 

Next, the matching check result determination 

15 unit 17 performs a combining operation using the 
matching check result about biometric feature 
information and the matching check result about 
auxiliary information (step S13), and compares the 
obtained operation value with a predetermined matching 

20 threshold (step S14). If the operation value is equal 
to or larger than the threshold, then the user is 
authenticated (step S15). If the operation value is 
smaller than the threshold, then the user is not 
authenticated (step S16), thereby terminating the 

25 process. 
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Then, the second authentication apparatus 
registers biometric feature information and auxiliary 
information other than the biometric feature 
information in a registering process, requests a user 
to input his or her biometric information in a 
matching check process, and determines the quality of 
the biometric feature information. If the second 
authentication apparatus determines that predetermined 
matching precision cannot be obtained, it requests the 
user to input his or her password. When the matching 
precision of the biometric feature information is low, 
the matching precision of the password is combined 
with the biometric feature information to attain the 
predetermined matching precision as in the case where 
auxiliary information is used. 

At this time, the number of digits of the input 
password is variable. The second authentication 
apparatus prompts the user to input his or her 
password of the necessary number of digits to attain 
the predetermined matching precision by combining the 
password with the matching precision of biometric 
feature information. For example, if the number of 
digits is designed to be set based on predetermined 
matching precision, then the number of digits can be 
set smaller when the matching precision is not so low. 
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In this case, an input; password is checked for 
matching with a part of a predetermined password. 
Thus, the user only has to input the smallest possible 
number of digits of his or her password, thereby 
5 maintaining the convenience of biometric feature 
information . 

FIG. 6 shows the configuration of the above 
described authentication apparatus . The 
authentication apparatus shown in FIG. 6 comprises a 

10 biometric information input unit 31, a biometric 
feature information extraction unit 32, a matching 
precision estimation unit 33, a password information 
setting unit 34, a password digit number setting unit 
35, a password information input unit 36, a matching 

15 check unit 37, a matching check result determination 
unit 38, a storage unit 39, and a control unit 40. 
The matching check unit 37 comprises a biometric 
feature information matching check unit 41 and a 
password information matching check unit 42 . The 

20 storage unit 39 comprises a biometric feature 
information registration and storage unit 43 and a 
password information registration and storage unit 44. 

The operations of the biometric information input 
unit 31, the biometric feature information extraction 

25 unit 32, the matching precision estimation unit 33, 
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the biometric feature information matching check unit 
41, the biometric feature information registration and 
storage unit 43, and the control unit 40 are the same 
as those in the authentication apparatus shown in FIG. 
2. 

If the matching precision estimation unit 33 
determines that predetermined matching precision 
cannot be obtained from biometric feature information, 
then it notifies the password information setting unit 
34 of the number of digits of the password required 
to supplement the matching precision. In response to 
the notification, the password information setting 
unit 34 inputs the number of digits to the password 
digit number setting unit 35. The password digit 
number setting unit 35 sets the number of digits, and 
prompts the user to input a password having the number 
of digits equal to or larger than the set number. The 
password information input unit 36 inputs password 
information . 

The password information registration and storage 
unit 44 preliminarily registers and stores password 
information. The password information matching check 
unit 42 has a matching check between the input 
password information and the preliminarily registered 
password information . 
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The matching check result determination unit 38 
combines using a predetermined function the matching 
precision computed from the matching check result 
about biometric feature information with the matching 
5 precision computed from the matching check result 
about password information. When the obtained 
matching precision is equal to or higher than 

O 

w predetermined matching precision, then the user is 

* *»» 

: f J authenticated . 

; s ~ 10 For example, assume that an other persons 

exclusion rate (non-matching rate) is used, and a 
product of two other persons acceptability rates is 
used as a predetermined function. Also assume that 
the reference value of the other person acceptability 
15 rate required to authenticate a user is set to 
1/100000, that it is estimated that only the matching 
precision of 1/1000 can be obtained according to 
biometric feature information, and that a 3-digit 
password is prompted based on the margin. 
20 At this time, if the other person acceptability 

rate of 1/10000 can be obtained after the actual 
matching check on the biometric feature information, 
then the other person acceptability rate based on a 
password can be 1/10 or lower according to the 
25 combining operation. Therefore, all of the input 
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digits do not have to match the registered password, 
but one or two digits matching the registered password 
can authenticate the user. 

FIG. 7 is a flowchart of the authenticating 
5 process performed by the authentication apparatus 
shown in FIG. 6. The processes from steps S21 through 
S28 shown in FIG. 7 are the same as the processes from 
steps SI thorough S8 shown in FIG. 5. 

In step S24, if the estimated matching precision 

10 is lower than predetermined matching precision, then 
the password digit number setting unit 35 sets the 
necessary number of digits of a password (step S29), 
and requests the user to input password information 
(step S30 ) . The password information input unit 36 

15 inputs password information (step S31 ) . Then, the 
biometric feature information matching check unit 41 
has a matching check between the extracted biometric 
feature information and the biometric feature 
information registered in the biometric feature 

20 information registration and storage unit 43 ( step 
S32). The password information matching check unit 
42 has a matching check between the input password 
information and the password information registered 
in the password information registration and storage 

25 unit 44 (step S33 ) . 
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Then, "the matching check result determination 
unit 38 performs a combining operation using the 
matching check result about the biometric feature 
information and the matching check result about the 
5 password information (step S34), and compares the 
obtained operation value with a predetermined matching 
threshold (step S35). If the operation value is equal 
Q to or larger than the threshold, then the user is 

authenticated (step S36). If the operation value is 

i ! ! ! 

; S ;J 10 smaller than the threshold, then the user is not 

its. 

' authenticated ( step S37 ) , thereby terminating the 

'£ : " 

•a process . 

l.l. The third authentication apparatus registers 

l.t plural pieces of biometric feature information, and 

Cj 15 performs an authenticating process according to the 

information. For example, when biometric information 
relates to a fingerprint, the fingerprints of the left 
and right forefingers are used. When biometric 
information relates to the iris, the information about 
20 the irises of the right and left eyes is used. When 
biometric information relates to voice, a plurality 
of different phrases or vowels are used. When 
biometric information relates to a signature, 
plurality of signatures are used. 
25 The third authentication apparatus requests the 
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user to input biometric information when a matching 
check is carried out to determine the quality of 
biometric feature information. If it determines that 
predetermined matching precision cannot be obtained, 
5 then it requests the user to input biometric 
information corresponding to other registered 
Itl , biometric feature information. Since plural pieces 

-3 of biometric information are used, it is not necessary 

to store a password, and so on, and only biometric 
10 information can correctly authenticate the user. 

"5 " ** 

;:f FIG. 8 shows the configuration of the 

« authentication apparatus when a fingerprint is used 

Ua as biometric information. The authentication 

Lt apparatus shown in FIG. 8 comprises a fingerprint 

£3 15 information input unit 51, a fingerprint feature 

information extraction unit 52, a matching precision 
estimation unit 53, a matching check unit 54, a 
matching check result determination unit 55, a storage 
unit 56, and a control unit 57. The matching check 
20 unit 54 comprises a fingerprint feature information 
matching check unit 58. The storage unit 56 comprises 
a fingerprint feature information registration and 
storage unit 59 . 

The control unit 57 controls the operations of 
25 the entire apparatus. The fingerprint information 
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input unit 51 inputs a fingerprint image. The 

biometric feature information extraction unit 12 
extracts fingerprint feature information from the 
input fingerprint image. The matching precision 
5 estimation unit 13 estimates the matching precision 
from the quality of the fingerprint feature 
information extracted from the fingerprint image input 
hJ in the matching check process. If the matching 

,•,3 precision estimation unit 13 determines that 

10 predetermined matching precision cannot be obtained, 
it notifies the control unit 57 that the fingerprint 
image of another finger is also required. In response 
us. to the notification, the control unit 57 prompts the 

i. user to input the fingerprint image of another 

Q 15 registered finger, and the fingerprint information 

* *■ r m*v 

input unit 51 inputs the fingerprint image. 

For example, if it is estimated that the matching 
precision is not sufficient when the first fingerprint 
image of the right forefinger is input, then the user 

20 is requested to input the fingerprint image of the 
right middle finger . 

The fingerprint feature information registration 
and storage unit 59 preliminarily registers and stores 
the fingerprint feature information extracted from the 

25 fingerprint images of a plurality of fingers. The 
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fingerprint feature information matching check unit 
58 has a matching check between the input fingerprint 
feature information about a plurality of fingers and 
the corresponding fingerprint feature information in 
5 the fingerprint feature information registration and 
storage unit 59, 

The matching check result determination unit 55 
combines using a predetermined function the matching 
precision computed from the matching check results 

10 about the fingerprint feature information of each 
finger. If the matching precision is equal to or 
higher than predetermined precision, then the user is 
authenticated . 

Thus, although it is estimated that the matching 

15 precision is not sufficient according to the 
fingerprint feature information of one finger, 
predetermined matching precision can be obtained by 
combining the fingerprint feature information about 
a plurality of fingers. 

20 FIG. 9 is a flowchart of the authenticating 

process performed by the authentication apparatus 
shown in FIG. 8. First, the fingerprint information 
input unit 51 inputs the fingerprint information about 
the first finger of the user (step S41 ) . The 

25 fingerprint feature information extraction unit 52 
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extracts the first fingerprint feature information 
from the first fingerprint information (the 
fingerprint information about the first finger) (step 
S42 ) . Then, the matching precision estimation unit 
53 estimates the matching precision from the quality 
of the fingerprint feature information (step S43 ) , and 
compares the estimated matching precision with 
predetermined matching precision (step S44 ) . 

If the estimated matching precision is equal to 
or higher than the predetermined matching precision, 
then the fingerprint feature information matching 
check unit 58 has a matching check between the 
extracted fingerprint feature information and the 
fingerprint feature information registered in the 
fingerprint feature information registration and 
storage unit 59 (step S45), and compares the matching 
check result with a predetermined matching threshold 
(step S46). If the matching check result is equal to 
or larger than the threshold, then the user is 
authenticated (step S47 ) . If the matching check 
result is smaller than the threshold, then the user 
is not authenticated (step S48 ) , thereby terminating 
the process. 

If the estimated matching precision is lower than 
the predetermined matching precision in step S44, then 
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the control unit 57 requests the user to input the 
fingerprint information about the second finger (step 
S49). Then, the fingerprint information input unit 
51 inputs the second fingerprint information (step 
5 S50), and the fingerprint feature information 
extraction unit 52 extracts the second fingerprint 
feature information from the second fingerprint 
information ( step S51 ) . 

Then, the matching check unit 54 has a matching 

10 check between the first fingerprint feature 
information and the corresponding fingerprint feature 
information registered in the biometric feature 
information registration and storage unit 22 ( step 
S52), and has a matching check between the second 

15 fingerprint feature information and the corresponding 
fingerprint feature information registered in the 
biometric feature information registration and storage 
unit 22 ( step S53 ) . 

Next, the matching check result determination 

20 unit 55 performs a combining operation using two 
matching check results about the fingerprint feature 
information (step S54), and compares the obtained 
operation value with a predetermined matching 
threshold (step S55). If the operation value is equal 

25 to or larger than the threshold, then the user is 
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authenticated (step S56). If the operation value is 
smaller than the threshold, then the user is not 
authenticated (step S57), thereby terminating the 
process . 

5 The above embodiment is described based on 

fingerprints, but the fingerprints can be replaced 
with other biometric information such as an irises 
(right and left eyes), voiceprints (different phrases 
or vowels), the distributions of the blood vessels in 

10 a retina (right and left eyes), a signature (different 
signatures), a face image, DNA, and so on. In 
addition, the biometric information about three or 
more objects such as a forefinger, a middle finger, 
and a thumb can be used. 

15 Then, the fourth authentication apparatus 

registers plural types of biometric feature 
information processed in different matching check 
methods, and an authenticating process is performed 
by combining a plurality of matching check methods. 

20 For example, combinations of a fingerprint and voice, 
a fingerprint and irises, a fingerprint and a 
signature, a fingerprint and a face image, and so on, 
are used. 

The fourth authentication apparatus requests the 
25 user to input biometric information in a matching 
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check process, and determines the quality of biometric 
feature information. If it is determined that 
predetermined matching precision cannot be obtained, 
then the user is requested to input biometric 
5 information corresponding to another type of 
registered biometric feature information. Since 
plural types of matching check methods are used, it 
is not necessary to store a password, and so on, and 

Q the user can be authenticated only by biometric 

y£ 10 information. 

'■a • 3 

FIG. 10 shows the configuration of the above 
is described authentication apparatus. The 

s a authentication apparatus shown in FIG. 10 comprises 

biometric information input units 61 and 65, biometric 
15 feature information extraction units 62 and 66, a 
matching precision estimation unit 63, a biometric 
information setting unit 64, a matching check unit 67, 
a matching check result determination unit 68, a 
storage unit 69, and a control unit 70. The matching 
20 check unit 67 comprises biometric feature information 
matching check units 71 and 72. The storage unit 69 
comprises biometric feature information registration 
and storage units 73 and 74. 

The operations of the biometric information input 
25 unit 61, the biometric feature information extraction 
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unit 62, the matching precision estimation unit 63, 
and the control unit 70 are the same as those of the 
authentication apparatus shown in FIG. 2. 

When the matching precision estimation unit 63 
determines that predetermined matching precision 
cannot be obtained from biometric feature information, 
it notifies the biometric information setting unit 64 
that another matching check method is also required. 
In response to the notification, the biometric 
information setting unit 64 sets another type of 
biometric information, and prompts the user to input 
the biometric information. For example, if it is 
estimated that matching precision is not sufficient 
when the first fingerprint information is input, then 
the user is prompted to input voice information. 

The biometric information input unit 65 input 
biometric information. The biometric feature 

information extraction unit 66 extracts biometric 
feature information from the input biometric 
information . 

The biometric feature information registration 
and storage units 73 and 74 preliminarily register and 
store different types of biometric feature 
information. The biometric feature information 
matching check unit 71 has a matching check between 
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■the biometric feature information extracted by the 
biometric feature information extraction unit 62 and 
the biometric feature information in the biometric 
feature information registration and storage unit 73. 
5 The biometric feature information matching check unit 
72 has a matching check between the biometric feature 
information extracted by the biometric feature 
w information extraction unit 66 and the biometric 

..;3 feature information in the biometric feature 

10 information registration and storage unit 74. 
j;f Generally, the biometric feature information matching 

is check units 71 and 72 have a matching check on the 

I-:!, biometric feature information in respective matching 

;. check methods . 

O 15 The matching check result determination unit 68 

combines the matching precision computed from the 
matching check results obtained by the biometric 
feature information matching check units 71 and 72. 
When the matching precision is equal to or higher than 

20 predetermined precision, the user is authenticated. 

FIG. 11 is a flowchart of the authenticating 
process performed by the authentication apparatus 
shown in FIG. 10. The process relating to the first 
biometric information in steps S61 through S68 shown 

25 in FIG. 11 are the same as those in steps SI through 
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S8 shown in FIG. 5. 

If the estimated matching precision is lower than 
predetermined matching precision in step S64, the 
biometric information setting unit 64 requests the 
user to input the second biometric information of a 
type different from the type of the first biometric 
information (step S69 ) . Then, the biometric 

information input unit 65 inputs the second biometric 
information (step S70), and the biometric feature 
information extraction unit 66 extracts the second 
biometric feature information from the second 
biometric information ( step S71 ) . 

Next, the biometric feature information matching 
check unit 71 has a matching check between the first 
biometric feature information and the biometric 
feature information registered in the biometric 
feature information registration and storage unit 73 
(step S72). The biometric feature information 

matching check unit 72 has a matching check between 
the second biometric feature information and the 
biometric feature information registered in the 
biometric feature information registration and storage 
unit 74 (step S73 ) • 

Then, the matching check result determination 
unit 68 performs a combining operation using the 
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matching check results about two types of biometric 
feature information (step S74), and compares the 
obtained operation value with a predetermined matching 
threshold (step S75). If the operation value is equal 
5 to or larger than the threshold, then the user is 
authenticated (step S76). If the operation value is 
smaller than the threshold, then the user is not 
authenticated (step S77), thereby terminating the 
process . 

10 In this example, any combination of different 

types of biometric information such as a fingerprint, 
irises, a voiceprint, the distribution of the blood 
vessels in a retina, a signature, and so on, can also 
be similarly used as the first and the second 

15 biometric information. 

In the authentication apparatus shown in FIGS. 
2 and 6, the biometric feature information and the 
auxiliary information such as a password, and so on, 
are input to the matching check unit as different 

20 matching check data. However, these pieces of data 
can be collectively transmitted to the matching check 
unit as a set of matching check data. The matching 
check path can be simple by collectively processing 
the matching check data in the apparatus. That is, 

25 one type of matching check data can be transferred 
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only once from the biometric feature information 
extraction unit and the auxiliary information input 
unit to the matching check unit. In addition, it is 
not necessary to repeating the phase of inputting a 
5 number of types of matching check data. 

Assume that a matching check data generation unit 
is provided in an authentication apparatus. If it is 
determined based on the quality of biometric feature 
information that predetermined matching precision 

10 cannot be obtained, then the matching check data 
generation unit combines the biometric feature 
information with auxiliary information, generates a 
set of matching check data as shown in FIG. 12, and 
transmits the data to a matching check unit. 

15 FIG. 13 is a flowchart of the matching check data 

generating process performed by the authentication 
apparatus. The authentication apparatus first inputs 
biometric information (step S81), extracts biometric 
feature information from biometric information (step 

20 S82 ) , and inputs auxiliary information (step S83 ) . 

Then, an auxiliary information data process is 
performed ( step S84 ) , and matching check data is 
generated by combining biometric feature information 
with auxiliary information (step S85), thereby 

25 terminating the process. 
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Similarly, the authentication apparatus shown in 
FIG. 8 is designed to generate a set of matching check 
data by combining plural pieces of fingerprint feature 
information about a plurality of fingers. To be more 
5 common, a set of matching check data can be generated 
by combining plural pieces of biometric feature 
information corresponding to the same matching check 
:jj method. In addition, in the authentication apparatus 

: t: shown in FIG. 10, a set of matching check data can be 

;J: 10 generated by combining plural types of biometric 

; : ti 
'? ■ ** 

■kl feature information processed in different matching 

;s check methods. Using the matching check data, a 

i! 1 

simple matching check path can be established. 
14 Thus, processing one type of matching check data 

Cl 15 can be realized as in a conventional method when 

»» - — 

communicating with an existing system by transmitting 
plural pieces of matching check data as one set of 
matching check data, thereby simplifying the 
installation of the apparatus. On the other hand, in 

20 the method of requesting subsequent matching check 
data when a matching check outputs a non-matching 
result about a set of matching check data, it is 
estimated that the communications cost doubles. 

Described below is a client-server type 

25 authentication system for transmitting biometric 
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feature information from a client to a server, and 
having a matching check in the server. In this 
system, the matching precision of biometric feature 
information is estimated on the client side, and a 
5 user is requested to input auxiliary information if 
necessary. Then, matching check data is generated by 
combining biometric feature information with auxiliary 
information, and is transmitted to the server. 

According to the system, the time of transmitting 

10 matching check data to a server can be only one. In 
addition, since the times of transmitting matching 
check data are equal between the case where auxiliary 
information is required and the case where no such 
information is required, thereby generating a simple 

15 communications procedure. 

FIG. 14 shows the configuration of the above 
described authentication system. The authentication 
system shown in FIG. 14 comprises a client 81, a 
server 82, and a network system 83 for connecting 

20 them. The network system 83 includes any network such 
as a LAN ( local area network ) , a WAN ( wide area 
network ) , and so on . 

The client 81 comprises a biometric information 
input unit 91, a biometric feature information 

25 extraction unit 92, a matching precision estimation 
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unit 93, an auxiliary information setting unit 94, an 
auxiliary information input unit 95, a matching check 
data generation unit 96, a communications unit 97, and 
a control unit 98. 
5 The server 82 comprises a communications unit 

101, a matching check unit 102, a matching check 
result determination unit 103, a storage unit 104, and 
a control unit 105. The matching check unit 102 
comprises a biometric feature information matching 
10 check unit 106, a matching check data separation unit 

107, and an auxiliary information matching check unit 

108. The storage unit 104 comprises a biometric 
feature information registration and storage unit 109 
and an auxiliary information registration and storage 

15 unit 110. 

The operations of the biometric information input 
unit 91, the biometric feature information extraction 
unit 92, the matching precision estimation unit 93, 
the auxiliary information setting unit 94, the 

20 auxiliary information input unit 95, the matching 
check result determination unit 103, the biometric 
feature information matching check unit 106, the 
auxiliary information matching check unit 108, the 
biometric feature information registration and storage 

25 unit 109, and the auxiliary information registration 
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and storage unit 110 are the same as those of the 
authentication apparatus shown in FIG. 2. 

The control unit 98 controls the operations of 
the entire client 81. The control unit 105 controls 
5 the operations of the entire server 82. The matching 
check data generation unit 96 of the client 81 
generates matching check data by combining biometric 
feature information with auxiliary information. The 
communications unit 97 transmits the generated 

10 matching check data to the server 82. The 
communications unit 101 of the server 82 receives the 
matching check data. The matching check data 
separation unit 107 separates the received matching 
check data into biometric feature information and 

15 auxiliary information, inputs the biometric feature 
information to the biometric feature information 
matching check unit 106, and inputs the auxiliary 
information to the auxiliary information matching 
check unit 108. 

20 FIG. 15 is a flowchart of the process performed 

by the client 81 shown in FIG. 14. The processes in 
steps S91 through S94 shown in FIG. 15 are the same 
as those in steps SI through S4 shown in FIG. 5. The 
processes in steps S97 and S98 shown in FIG. 15 are 

25 the same as those in steps S9 and S10 shown in FIG. 
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5. 

In step S94, if "the estimated matching precision 
is equal to or higher than predetermined matching 
precision, then the matching check data generation 
5 unit 96 generates matching check data containing only 
biometric feature information (step S95), and the 
communications unit 97 transmits the matching check 
data to the server 82 (step S96), thereby terminating 
the process. 

10 If auxiliary information is input in step S98, 

the matching check data generation unit 96 performs 
an auxiliary information data process (step S99), and 
generates matching check data by combining the 
biometric feature information with the auxiliary 

15 information (step S100). Then, the communications 
unit 97 transmits the matching check data to the 
server 82 (step S101 ) , thereby terminating the 
process . 

FIG. 16 is a flowchart of the process performed 
20 when the server 82 shown in FIG. 14 receives matching 
check data containing only biometric feature 
information. First, the communications unit 101 
receives matching check data from the client 81 (step 
Sill). The processes in the subsequent steps S112 
25 through S115 are the same as those in steps S5 through 
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S8 shown in FIG. 5. 

FIG. 17 is a flowchart of the process performed 
when the server 82 shown in FIG. 14 receives matching 
check data containing biometric feature information 
5 and auxiliary information. First, the communications 
unit 101 receives matching check data from the client 
81 (step S121 ) , and the matching check data separation 
unit 107 separates the matching check data into 
biometric feature information and auxiliary 
10 information (step S122). The subsequent processes in 
^ steps S123 through S128 are the same as those in steps 

in Sll through SI 6 shown in FIG. 5. 

Similarly, matching check data is generated by 
combining plural pieces of biometric feature 
15 information corresponding to the same matching check 
method, and can be transmitted from a client to a 
server. In addition, matching check data can also be 
generated by combining plural pieces of biometric 
feature information processed in different matching 
20 check methods, and can be transmitted from a client 
to a server . 

Thus, when plural pieces of matching check data 
are processed, the data can be processed in a simple 
communications procedure by transferring the data as 
25 a set of data from a client to a server. The 
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transferred matching check data is analyzed into the 
original matching check data in the server, and 
transmitted to a matching check unit corresponding to 
each matching check method. On the other hand, if a 
5 method of requesting subsequent matching check data 
is used when a matching check outputs a non-matching 
result, the communications cost is estimated to 
double. 

The fifth authentication apparatus estimates 
10 matching precision from biometric feature information 
in a registering process, and requests to register 
auxiliary information when it is determined that 
predetermined matching precision cannot be obtained. 
Then, in a matching check process, it generally 
15 determines the matching check result between biometric 
feature information and auxiliary information to 
authenticate the user. The predetermined matching 
precision can be attained by combining the matching 
precision of the biometric feature information with 
20 the matching precision of the auxiliary information, 
thereby minimizing the possibility of a non-matching 
result . 

FIG. 18 shows the configuration of the above 
described authentication apparatus . The 
25 authentication apparatus shown in FIG. 18 comprises 
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a biometric information input unit 111, a biometric 
feature information extraction unit 112, a matching 
precision estimation unit 113, an auxiliary 
information setting unit 114, an auxiliary information 
5 input unit 115, a storage unit 116, a matching check 
unit 117, a matching check result determination unit 
118, and a control unit 119. The storage unit 116 

r : ~ 
•s sS 

hi comprises a biometric feature information registration 

is ;w 

i ;j and storage unit 120 and an auxiliary information 

10 registration and storage unit 121. The matching check 

^ unit 117 comprises a biometric feature information 

>s matching check unit 122 and an auxiliary information 

matching check unit 123. 
: The operations of the biometric information input 
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ll 15 unit 111, the biometric feature information extraction 

•» ■ 

*m **** 

unit 112, the biometric feature information 
registration and storage unit 120, the auxiliary 
information registration and storage unit 121, the 
biometric feature information matching check unit 122, 

20 the auxiliary information matching check unit 123, the 
matching check result determination unit 118, and the 
control unit 119 are the same as those of the 
authentication apparatus shown in FIG. 2. 

The matching precision estimation unit 113 

25 estimates the matching precision from the quality of 
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the biometric feature information extracted from the 
biometric information input in a registering process. 
If it is determined that predetermined matching 
precision cannot be obtained, then the matching 
5 precision estimation unit 113 notifies the auxiliary- 
information setting unit 114 that auxiliary 
information is required for authentication. In 
response to the notification, the auxiliary 
information setting unit 114 prompts the user to 
10 register auxiliary information, and the auxiliary 
information input unit 115 inputs auxiliary 
information . 

For example, although there are few fingerprint 
feature information registered, predetermined matching 

15 precision can be obtained in a matching check process 
by requesting to register a password as auxiliary 
information. Therefore, a user whose acceptable 
fingerprint feature information is not registered can 
be authenticated . 

20 FIG. 19 is a flowchart of the registering process 

performed by the authentication apparatus shown in 
FIG. 18. The processes in steps S131 through S134 
shown in FIG. 19 are the same as those in steps SI 
through S4 shown in FIG. 5. The processes in steps 

25 S137 and S138 shown in FIG. 19 are the same as those 
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in steps S9 and S10 shown in FIG. 5. 

If the estimated matching precision is equal to 
or higher than predetermined matching precision in 
step S134, then the matching precision estimation unit 
5 113 generates registration data of biometric feature 
information (step S135), and registers and stores the 
data in the biometric feature information registration 
and storage unit 120 (step S136), thereby terminating 
the process . r 

10 If auxiliary information is input in step S138, 

the auxiliary information input unit 115 performs an 
auxiliary information data process (step S139), and 
generates the registration data of the auxiliary 
information (step S140). In addition, the matching 

15 precision estimation unit 113 generates the 
registration data of the biometric feature 
information, and registers and stores the registration 
data of the biometric feature information in the 
biometric feature information registration and storage 

20 unit 120, The auxiliary information input unit 115 
registers and stores the registration data of the 
auxiliary information in the auxiliary information 
registration and storage unit 121 (step S141 ) , thereby 
terminating the process. 

25 FIG. 20 is a flowchart of the authenticating 
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process according to auxiliary information performed 
by the authentication apparatus shown in FIG. 18. 
First, the biometric information input unit 111 
requests the user to input biometric information (step 
5 S151), and inputs the information (step S152). The 
biometric feature information extraction unit 112 

... extracts biometric feature information from biometric 

's3 information (step S153). 

\/j Then, the auxiliary information input unit 115 

10 requests the user to input auxiliary information (step 
S154), inputs it (step S155), and performs auxiliary 

i5 information data process (step S156). The processes 

in the subsequent steps S157 through S162 are the same 
as those in steps Sll through SI 6 shown in FIG. 5. 

Q 15 Especially when password information is used as 

i i 

auxiliary information, an auxiliary information 
setting unit 134 sets the necessary number of digits 
to supplement the matching precision attained by 
biometric feature information, and requests the user 

20 to register password information having the number of 
digits larger than the set number. By registering a 
password having the minimal number of digits, correct 
authentication can be guaranteed without lowering the 
convenience obtained by the biometric feature 

25 information. On the other hand, when the user forgets 
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his or her password, biometric information can solve 
the problem. 

The registration of biometric feature information 
and auxiliary information can be replaced with the 
5 registration of plural pieces of biometric feature 
information. For example, when a fingerprint is used, 
the fingerprint feature information about plurality 
of fingers is registered. The authentication 

apparatus determines the quality of the biometric 

10 feature information. If it determines that 

predetermined matching precision cannot be obtained, 
then it requests the user to register another piece 
of biometric feature information. When a matching 
check is carried out, a total score is computed from 

15 the matching check score of each piece of biometric 
feature information to authenticate the user. Thus, 
the probability of a non-matching result can be 
minimized . 

In addition, different types of biometric feature 
20 information to be processed in different matching 
check methods can also be registered. The 
authentication apparatus determines the quality of the 
biometric feature information in the registering 
process. If it determines that predetermined matching 
25 precision cannot be obtained, then it requests the 



i- : 



I i! 
'n ■ ■» 



; 3 :St 



it ; ^ 

» * 



62 

user to register another type of biometric feature 
information. By performing processes in plural types 
of matching check methods, the poor reproducibility 
of one type of biometric feature information can be 
successfully covered. When a matching check is 
carried out, the matching check results of all 
matching check methods are collectively determined to 
authenticate the user. Thus, the probability of a 
non-matching result can be minimized. 



10 Then, the sixth authentication apparatus 

registers and stores biometric feature information and 



auxiliary information as a set of registration data. 
Data can be more simply managed by collectively 
managing registration data in the apparatus. 

15 FIG. 21 shows the configuration of the above 

described authentication apparatus. The 
authentication apparatus shown in FIG. 21 comprises 
a biometric information input unit 131, a biometric 
feature information extraction unit 132, a matching 

20 precision estimation unit 133, an auxiliary 
information setting unit 134, an auxiliary information 
input unit 135, a storage unit 136, a matching check 
unit 137, a matching check result determination unit 
138, and a control unit 139. The storage unit 136 

25 comprises a registration data generation unit 140, a 
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registration data storage unit 141, and a registration 
data separation unit 142. The matching check unit 137 
comprises a biometric feature information matching 
check unit 143, and an auxiliary information matching 
5 check unit 144. 

The operations of the biometric information input 
unit 131, the biometric feature information extraction 
unit 132, the matching precision estimation unit 133, 
the auxiliary information setting unit 134, the 

10 auxiliary information input unit 135, the biometric 
feature information matching check unit 143, the 
auxiliary information matching check unit 144, the 
matching check result determination unit 138, and the 
control unit 139 are the same as those of the 

15 authentication apparatus shown in FIG. 18. 

The registration data generation unit 140 
generates a set of registration data by combining 
biometric feature information with auxiliary 
information, and registers and stores in the 

20 registration data storage unit 141. The registration 
data separation unit 142 analyzes the registration 
data registered in the registration data storage unit 
141 into biometric feature information and auxiliary 
information, and transmits the result to the matching 

25 check unit 137. 
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The authentication apparatus shown in FIG. 21 
perform a registering process as shown in FIG. 19. 
In step S134 shown in FIG. 19, if the estimated 
matching precision is equal to or higher than 
5 predetermined matching precision, then thee 
registration data generation unit 140 generates 
registration data containing only biometric feature 
information (step S135), registers and stores the data 
in the registration data storage unit 141 (step S136), 

10 thereby terminating the process . 

If auxiliary information is input in step S138, 
then the registration data generation unit 140 
performs the auxiliary information data process ( step 
S139 ) , and generates registration data by combining 

15 biometric feature information with auxiliary 
information (step S140). Then, the registration data 
is registered and stored in the registration data 
storage unit 141 (step S141), thereby terminating the 
process . 

20 Similarly, registration data can be generated by 

combining plural pieces of biometric feature 
information corresponding to the same matching check 
method, and can also be generated by combining plural 
types of biometric feature information processed in 

25 different matching check methods. 
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Next, the seventh authentication apparatus 
registers the type of auxiliary information when a 
registration matching check process is performed with 
biometric feature information associated with personal 
5 identification information. When personal 

identification information is input in a matching 
check process, the user is requested to input 
biometric information, and registered predetermined 
auxiliary information . 

10 FIG. 22 shows the configuration of the above 

described authentication apparatus. The 
authentication apparatus shown in FIG. 22 comprises 
an ID number input unit 151, a biometric information 
input unit 152, a biometric feature information 

15 extraction unit 153, a matching precision estimation 
unit 154, an auxiliary information setting unit 155, 
an auxiliary information input unit 156, a storage 
unit 157, a matching check unit 158, a matching check 
result determination unit 159, and a control unit 160. 

20 The storage unit 157 comprises a registration 

data type management unit 161, an ID number management 
unit 162, a registration data generation unit 163, a 
registration data storage unit 164, and a registration 
data separation unit 165. The matching check unit 158 

25 comprises a biometric feature information matching 
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check unit 166, and an auxiliary information matching 
check unit 167. 

The operations of the biometric information input 
unit 152, the biometric feature information extraction 
5 unit 153, the matching precision estimation unit 154, 
the auxiliary information setting unit 155, the 
auxiliary information input unit 156, the registration 
data generation unit 163, the registration data 
storage unit 164, the registration data separation 

10 unit 165, the biometric feature information matching 
check unit 166, the auxiliary information matching 
check unit 167, the matching check result 
determination unit 159, and the control unit 160 are 
the same as those of the authentication apparatus 

15 shown in FIG. 21. 

The registration data type management unit 161 
and the ID number management unit 162 corresponds to 
a database storing the correspondence between a user 
registration ID number and the type of registration 

20 data. . When the registration data generation unit 163 
registers registration data in the registration data 
storage unit 164, the registration data type 
management unit 161 stores the type of auxiliary 
information contained in the registration data, and 

25 the ID number management unit 162 stores a 
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corresponding ID number. 

If the ID number input: unit 151 inputs the ID 
number of a user when a matching check process is 
performed, then the registration data type management 
5 unit 161 notifies the auxiliary information setting 
unit 155 of the type of the auxiliary information 
corresponding to the ID number. The auxiliary 

m r *w 

w information setting unit 155 requests the user to 

input the notified auxiliary information. 

;*» 10 FIG. 23 is a flowchart of the registering process 

performed by the authentication apparatus shown in 
FIG. 22. First, the ID number input unit 151 inputs 
the ID number of a user (step S171 ) . The processes 

)J* in steps S172 through S176 are the same as those in 

□ 15 steps S131 through S135 shown in FIG. 19. The 

processes in steps S180 through S183 shown in FIG. 12 
are the same as those in steps S137 through S140 shown 
in FIG. 19. However, in step S183, registration data 
is generated by combining biometric feature 
20 information with auxiliary information. 

When registration data is generated in step S176, 
the ID number management unit 162 stores an ID number 
(step S177), the registration data storage unit 164 
stores registration data (step S178), and the 
25 registration data type management unit 161 stores the 
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type of the biometric feature information contained 
in the registration data (step S179), thereby 
terminating the process. 

When registration data is generated in step S183, 
5 the ID number management unit 162 stores an ID number 
(step S184), the registration data storage unit 164 
stores registration data (step S185), and the 
\3 registration data type management unit 161 stores the 

ij types of the biometric feature information and the 

j=S[ 10 auxiliary information contained in the registration 

data (step S186), thereby terminating the process, 
is FIG* 24 is a flowchart of the authenticating 

process performed by the authentication apparatus 
\/i shown in FIG. 22. First, the ID number input unit 151 

£3 15 inputs an ID number of a user (step S191), and the 

registration data type management unit 161 notifies 
the biometric information input unit 152 and the 
auxiliary information setting unit 155 of the type of 
the input data (step S192). 
20 The processes in steps S193 through S198 are the 

same as those in steps S151 through S156 shown in FIG. 
20. In addition, the processes in steps S199 through 
S201 are the same as those in steps S5 through S7 
shown in FIG. 5. The processes in steps S202 through 
25 S206 are the same as those in steps S158 through S162 
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shown in FIG . 20 . 

Also when plural pieces of biometric feature 
information corresponding to the same matching check 
method or plural types of biometric feature 
5 information processed in different matching check 
methods are used as registration data, the type of 
registration data can be registered for each ID number 
of a user. In this case, the user is requested to 
input biometric information corresponding to the input 

10 ID number. 

Described below is the client- server type 
authentication system for having a matching check by 
a server after matching check data is transmitted from 
a client to the server. In this system, the type of 

15 auxiliary information is registered when a registering 
and matching check process is performed with biometric 
feature information associated with an ID number. When 
the client inputs the ID number of the user in the 
matching check process, the server requests the user 

20 to input biometric information based on the ID number, 
and also requests the user input predetermined 
auxiliary information . 

FIG. 25 shows the configuration of the above 
described authentication system. The authentication 

25 system shown in FIG. 25 comprises a client 171, a 
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server 172, and a network system 173 for connecting 
them. The network system 173 includes any network 
such as a LAN, a WAN, and so on. 

The client 171 comprises an ID number input unit 
5 181, a biometric information input unit 182, a 
biometric feature information extraction unit 183, a 
matching precision estimation unit 184, an auxiliary 

■'a :a" 

i:3 information input unit 185, a matching check data 

=.;5 generation unit 186, a communications unit 187, and 

J; 10 a control unit 188. 

i,!S 

^ The server 172 comprises an ID number 

<Z '• 11 

correspondence data retrieval unit 191, an auxiliary 
information request unit 192, a communications unit 
\J* 193, a matching check unit 194, a matching check 

15 result determination unit 195, a storage unit 19 6, and 
a control unit 197. The matching check unit 194 
comprises a biometric feature information matching 
check unit 198, a matching check data separation unit 
199, and an auxiliary information matching check unit 

20 2 00. The storage unit 196 comprises an ID number 
database (DB) 201, a registration data type DB 202, 
a biometric feature information registration and 
storage unit 203, and an auxiliary information 
registration and storage unit 204. 

25 The operations of the biometric information input 
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unit 182, the biometric feature information extraction 
unit 183, the matching precision estimation unit 184, 
the auxiliary information input unit 185, the matching 
check data generation unit 186, the communications 
unit 187, the control unit 188, the communications 
unit 193, the biometric feature information matching 
check unit 198, the matching check data separation 
unit 199, the auxiliary information matching check 
unit 200, the matching check result determination unit 
195, the biometric feature information registration 
and storage unit 203, the auxiliary information 
registration and storage unit 204, and the control 
unit 197 are the same as those in the authentication 
system shown in FIG. 14. 

The matching check data generation unit 186 and 
the matching check data separation unit 199 also 
functions respectively as the registration data 
generation unit 163 and the registration data 
separation unit 165 shown in FIG. 22. The ID number 
input unit 181, the ID number database (DB) 201, and 
the registration data type DB 202 respectively 
correspond to the ID number input unit 151, the ID 
number management unit 162, and the registration data 
type management unit 161 shown in FIG. 22. 

When the ID number input unit 181 inputs the 
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registered ID number of a user in the matching check 
process, the input ID number is transmitted to the 
server 172. The ID number correspondence data 
retrieval unit 191 retrieves the ID number database 
5 (DB) 201 and the registration data type DB 202 using 
the received ID number as a key, and obtains the type 
of the registration data corresponding to the ID 

L.i 

'■i'J number. The auxiliary information request unit 192 

notifies the client 171 of the type of the 
10 registration data as the type of necessary matching 
check data. The auxiliary information input unit 185 

;~ : a 

* requests the user to input the auxiliary information 

□ 

j Si a. corresponding to the notified type. 

l.t FIG. 26 is a flowchart of the registering process 

yi 15 performed by the authentication system shown in FIG. 

25. The processes in steps S211 through S216 shown 
in FIG. 26 are performed by the client 171, and are 
the same as those in steps S171 through S176 shown in 
FIG. 23. The processes in steps S220 through S223 
20 shown in FIG. 26 are performed by the client 171, and 
are the same as those in steps S180 through S183 shown 
in FIG. 23. 

In steps S216 and S223, the matching check data 
generation unit 186 generates registration data, and 
25 the communications unit 187 transmits the data to the 
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server 172. When the communications unit 193 receives 
the registration data generated in step S216, the ID 
number DB 201 stores the ID number (step S217), the 
biometric feature information registration and storage 
5 unit 203 stores biometric feature information 
contained in the registration data (step S218), and 
the registration data type DB 202 stores the type of 

Q the biometric feature information (step S219), thereby 

; 3 terminating the process. 

•> 

;»;f 10 When the communications unit 193 receives the 

registration data generated in step S223, the ID 
number DB 201 stores the ID number (step S224), the 

!* .2 

| 3 "7 biometric feature information registration and storage 

! t unit 203 stores the biometric feature information 

Q 15 contained in the registration data, the auxiliary 

information registration and storage unit 204 stores 
the auxiliary information contained in the 
registration data (step S225), and the registration 
data type DB 202 stores the type of the biometric 
20 feature information and the auxiliary information 
( step S226 ) , thereby terminating the process . 

FIG. 27 is a flowchart of the authenticating 
process performed by the client 171 shown in FIG. 25. 
First, the ID number input unit 151 inputs the ID 
25 number of a user (step S231 ) , the communications unit 
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187 transmits the input ID number to the server 172 
( step S232 ) . The ID number correspondence data 
retrieval unit 191 of the server 172 obtains the type 
of the registration data corresponding to the received 
5 ID number, and the auxiliary information request unit 
192 transmits it as the type of the input data for use 
in a matching check to the client 171. 
\J The communications unit 187 receives the type of 

i.;3 the input data (step S233 ) . Then, the biometric 

y~ 10 information input unit 182 requests the user to input 

biometric information for use in a matching check 

V s 

a according to the notification from the server 172, and 

i~T inputs the biometric information (step S234). In 

addition, the auxiliary information input unit 185 
O 15 requests the user to input auxiliary information for 

L.i 

use in a matching check according to the notification 
from the server 172, and inputs the biometric 
information (step S235). 

Then, the biometric feature information 

20 extraction unit 183 extracts the biometric feature 
information from the biometric information ( step 
S236), the matching check data generation unit 186 
generates matching check data by combining the 
biometric feature information with the auxiliary 

25 information. Then, the communications unit 187 



75 

transmits the generated matching check data to the 
server 172 (step S237 ) , thereby terminating the 
process . 

FIG. 28 is a flowchart of the authenticating 
5 process performed by the server 172 who received the 
matching check data. The processes in steps S241 
through S248 shown in FIG. 28 are performed after the 
bJ matching check data has been divided into the 

:;j biometric feature information and the auxiliary 

pi i 

; 5 ;I 10 information, and are the same as those in steps S199 

)^ through S206 shown in FIG. 24. 

In addition, when plural pieces of biometric 
;*T feature information corresponding to the same matching 

\/Z check method, and plural different types of biometric 

□ 15 feature information are used as matching check data, 

registration data and matching check data are 
generated on the client side, and registered and 
matching-checked on the server side. 

FIG. 29 shows the combination of matching check 
20 data used in a client-server type authenticating 
system. In FIG. 29, matching check data 213 

transmitted from a client 211 to a server 212 is 
generated by combining biometric feature information 
with auxiliary information, combining plural pieces 
25 of biometric feature information of one type, 
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combining plural "types of biometric feature 
information, and so on. As an example of auxiliary 
information, a password is used, and as examples of 
plural pieces of biometric feature information, 
5 forefinger fingerprint feature information and middle 
finger fingerprint feature information are used. 

On the other hand, remote authentication in a 

! 1 

; il remote authentication dial-in user service (RADIUS), 

and dial-up authentication in a point-to-point 
10 protocol (PPP) can be used as a client-server type 
j:: authenticating method • 

When the remote authentication in the RADIUS is 
j s: i. used, the registration data or the matching check data 

;/t generated by a client is stored in a user name (USER- 

£3 15 NAME ) area of the RADIUS protocol and a user password 

•* 

(USER-PASSWORD) area, and transmitted from a client 
to a server. Furthermore, the registration data or 
the matching check data can also be stored in the EAP 
( extensible authentication protocol ) message area of 
20 the RADIUS protocol, and transmitted from a client to 
a server . 

Thus, a remote authentication procedure in the 
RADIUS can be used as is by processing the matching 
check data as a set of data, storing the data in a 
25 specific area of the RADIUS protocol, and transmitting 
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the data. 

When the dial-up authentication in the PPP is 
used, the registration data or the matching check data 
generated by a client is stored in a user name area 
of the PPP protocol and a user password area, and 
transmitted from a client to a server. Thus, a dial- 
up authentication procedure in the PPP can be used as 
is by processing the matching check data as a set of 
data, storing the data in a specific area of the PPP 
protocol, and transmitting the data. 

In the case of the authentication system in the 
dial-up method, the client stores registration data 
and matching check data as the quantity of data within 
a predetermined value transf errable in the PPP for 
transmission to the server. The predetermined value 
can be , for example , 300 bytes . Thus , the remote 
authentication procedure in the RADIUS and the dial-up 
authentication procedure in the PPP can be used as is. 

As shown in FIG. 30, an ID number input by a user 
can be assigned an identification code ( for example, 
a character code) corresponding to the type of 
registration data. Using such an identification code, 
a client can determine, without asking the server, 
what type of biometric information or auxiliary 
information the client should request when the ID 
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number is input: . 

As shown in FIG. 31, the information about the 
type of biometric information and auxiliary 
information can be described in the matching check 
5 data. By adding such type information, the matching 
check data can be easily separated when the matching 
check data is transmitted to a matching check unit. 
This holds true with the registration data. 

As shown in FIG. 32, the format information 

10 indicating the configuration of the matching check 
data can be described in the matching check data. By 
adding the format information, the matching check data 
can be easily separated when the matching check data 
is transmitted to a matching check unit. This holds 

15 true with the registration data. 

The eighth authentication apparatus registers 
biometric feature information and auxiliary 
information when a registering process is performed, 
and a user is requested to input biometric information 

20 and auxiliary information. By requesting the user to 
input auxiliary information, a matching check result 
can be obtained at predetermined matching precision 
even when biometric information is changed or the 
biometric feature information has poor 

25 reproducibility. As a result, the user can be easily 
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authenticated without making biometric information 
unavailable . 

FIG. 33 shows the configuration of the above 
described authentication apparatus. The 
5 authentication apparatus shown in FIG. 33 comprises 
a biometric information input unit 221, a biometric 
feature information extraction unit 222, an auxiliary 
information input unit 223, a matching check unit 224, 
a matching check result determination unit 225, a 

10 storage unit 226, and a control unit 227. The 
matching check unit 224 comprises a biometric feature 
information matching check unit 228 and an auxiliary 
information matching check unit 229. The storage unit 
226 comprises a biometric feature information 

15 registration and storage unit 230, and an auxiliary 
information registration and storage unit 231. The 
operations of respective units are the same as in the 
authentication apparatus shown in FIG. 2. However, 
since there are no matching precision estimation units 

20 or auxiliary information setting units, the entire 
configuration is simpler. 

FIG. 34 is a flowchart of the authenticating 
process performed by the authentication apparatus 
shown in FIG. 33. First, the biometric information 

25 input unit 221 input the biometric information of a 
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user (step S251 ) . The auxiliary information input 
unit 223 inputs auxiliary information (step S252). 
The biometric feature information extraction unit 222 
extracts biometric feature information from the input 
5 biometric information (step S253). The subsequent 
processes in steps S254 through S261 are the same as 
those in steps S241 through S248 shown in FIG. 28. 

The above described authentication apparatus, 
client, and server can be designed using the 

10 information processing device (computer) as shown in 
FIG. 35. The information processing device shown in 
FIG. 35 comprises a CPU (central processing unit) 241, 
memory 242, an input device 243, an output device 244, 
an external storage device 245, a medium drive device 

15 246, and a network connection device 247. They are 
interconnected through a bus 248. 

The memory 242 comprises, for example, ROM (read- 
only memory), RAM (random access memory), and so on, 
and stores a program and data used in performing 

20 processes. The CPU 241 performs necessary processes 
by executing a program using the memory 242. 

The input device 243 can be, for example, a 
keyboard, a pointing device, a touch panel, and so on, 
and is used when a user inputs an instruction and 

25 information. The output device 244 can be, for 
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example, a display, a printer, a speaker, and so on, 
and is used when an inquiry and a process result: are 
output to a user. 

The external storage device 245 can be, for 
5 example, a magnetic disk device, an optical disk 
device, a magneto-optical disk) device, and so on. 
The information processing device stores the above 
described program and data in the external storage 
device 245, and loads them to the memory 242 for use 
10 as necessary. The external storage device 245 can 
also be used as a database storing registration data, 
the type of registration data, an ID number, and so 
on. 

The medium drive device 246 drives a portable 
15 storage medium 249 , and accesses the recorded 
contents. The portable storage medium 249 can be any 
computer readable storage medium such as a memory 
card, floppy disk, CD-ROM (compact disk read-only 
memory), an optical disk, a magneto-optical disk, and 
20 so on. The administrator stores the above described 
program and data in the portable storage medium 249, 
and the information processing device loads them to 
the memory 242, and so on, for use as necessary. 

The network connection device 247 communicates 
25 with an external device through any network (line), 
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and converts data in the communications. Furthermore, 
the information processing device receives the above 
described program and data from an external device as 
necessary through the network connection device 247, 
5 and loads them in the memory 242 for use. 

FIG. 36 shows a computer-readable storage medium 
capable of providing a program and data for the 
information processing device shown in FIG. 35. A 
program and data stored in the portable storage medium 

10 249 and an external database 250 are loaded onto the 
memory 242. Then, the CPU 241 executes the program 
using the data, and performs necessary processes. 

According to the present invention, in the user 
authentication technology using biometric information, 

15 a value-added process can be performed at high 
precision by using additional authentication data even 
if the biometric feature information of a user has 
poor reproducibility. Therefore, a user having poor 
reproducibility about biometric feature information 

20 can use the authentication system. 

In addition, a client-server type authentication 
system can be operated with communications cost 
reduced by transferring biometric feature information 
and additional authentication data as a set of 

25 matching check data . 



